SILICON SLOPES, UT – September 6, 2017 – HEROIC.com, provider of enterprise credential stuffing protection, today announced the release of EPIC, an enterprise-focused solution that empowers security professionals to discover, remediate and prevent credential stuffing, the unauthorized use of stolen login credentials in targeted attacks. With EPIC, organizations can now know where and when employee and customer logins are compromised online.

“EPIC gives organizations the ability to gather insights into potential vulnerabilities that they wouldn’t have noticed otherwise,” said Chad Bennett, HEROIC founder and CEO. “Unfortunately, hundreds of businesses fall victim to cyber attacks every day. Credential stuffing is one of the most frequent methods of attack and one of the least protected in today’s cybersecurity landscape. EPIC aims to fix that.”

Additionally, EPIC helps organizations satisfy the latest password requirements found in the 2017 NIST Special Publication 800-63B, Authentication and Lifecycle Management. The new guidelines require that organizations utilize a legitimate database of compromised credentials to stop the usage of dictionary words, previous breach passwords and repetitive characters within new passwords.

According to Verizon’s 2017 Data Breach Investigations Report, 81% of surveyed organizations reported hacker-related breaches by an unauthorized party leveraging either stolen or weak passwords. The number of credential misuse incidents is up 18% from Verizon’s 2016 report – making credential stuffing the most common attack technique. With over three billion records being leaked to the dark web last year, credential stuffing has quickly outgrown other attack methods and become a top priority for cybersecurity professionals to defend.

About HEROIC
HEROIC.com provides companies and individuals with a solution for their biggest risk; stolen login credentials and sensitive data. HEROIC has created the world’s largest public hack database, comprised of over 5 billion individual records from over 3,000 data breaches. HEROIC alerts and notifies individuals when their private information including email addresses, usernames and passwords become compromised online. To see if a company email and/or employee emails are at risk and to learn more about HEROIC’s Enterprise services, visit www.heroic.com/enterprise.